Privacy Policy
SHIVAM ITCS is committed to transparent, privacy-by-design engineering. We treat your proprietary IP and personal data with the same rigorous care we demand for our own systems.
No Foundation Model Retraining
We strictly enforce zero-retention data protection. Client prompts, proprietary databases, and internal documents are never ingested into third-party foundation model training sets.
AES-256 & TLS 1.3 Encryption
All client communication and metadata are encrypted in transit using TLS 1.3 and at rest using AES-256 cryptographic standards with automated key rotation.
GDPR & CCPA Rights Fulfillment
Users maintain complete rights to access, rectify, export, or request deletion of their personal information. Data subject requests are fulfilled within 72 business hours.
Cookie Transparency
We use only essential session cookies and privacy-respecting analytics. We do not sell, rent, or monetize your contact or telemetry information to third-party ad networks.
1. Information We Collect
When you interact with SHIVAM ITCS via our contact forms, architecture consultations, or recruitment channels, we may collect your name, business email address, phone number, company name, and project requirements. We collect this data solely to provide technology consulting proposals, execute contracts, and communicate project deliverables.
2. Artificial Intelligence & Large Language Model Safeguards
In our capacity as an AI solutions engineering partner, we integrate third-party model providers (such as Anthropic, OpenAI, Microsoft Azure OpenAI, and Google Cloud Vertex AI) as well as self-hosted open-weights models (such as Llama 3 and DeepSeek R1). We configure enterprise endpoints with explicit **Zero Data Retention (ZDR)** flags enabled. Your queries, proprietary code, RAG embeddings, and business rules are never submitted for model retraining.
3. Data Retention & Deletion
We retain client project artifacts and audit telemetry only as long as necessary to fulfill project requirements, provide ongoing SLA support, or comply with statutory financial audits (typically up to 2 years post-contract). Upon project offboarding, clients may submit an immutable purge request for all scratch disks, vector indices, and staging buckets.
4. Data Subject Rights (GDPR & CCPA)
Under global data protection laws (including the EU General Data Protection Regulation and California Consumer Privacy Act), you are entitled to:
- Request a complete copy of all personal records maintained in our systems.
- Request rectification of incomplete or inaccurate records.
- Request total erasure ("Right to be Forgotten") of your personal contact data.
- Object to or restrict the processing of your data for marketing communications.
Cookie Policy & Local Storage
Overview of technical identifiers utilized across the platform.
| Category | Purpose | Retention Duration | Classification |
|---|---|---|---|
| Essential Technical Cookies | Required for core website navigation, session preservation, CSRF token validation, and theme switching. | Session / 30 Days | Required |
| Performance & Diagnostic Telemetry | Aggregated, anonymized latency metrics and Core Web Vitals diagnostics to maintain sub-second response times. | 90 Days | Optional |
| Inquiry & Interaction Context | Stores form pre-fill information and currency switcher preferences across browsing sessions. | 180 Days | Optional |
Data Protection Officer (DPO) Contact
For any privacy inquiries, GDPR data requests, or compliance auditing questions, contact our legal and compliance office. Responses are guaranteed within 72 hours.
Email: legal@shivamitcs.in • dpo@shivamitcs.in